CVE-2026-98432 Kernel Flaw: Ubuntu, RHEL, Debian Status
CVE-2026-98432 is a CVSS 9.8 Linux kernel TCP flaw. Fix status for Ubuntu, RHEL, Debian, Amazon Linux and SUSE, and how to prove each server is patched.
Read moreHTTP2Shell & Node2Shell: Patching CVE-2026-111497
CVE-2026-111497 is a CVSS 9.2 Brotli RCE in Node.js, Python and more. Fixed versions, distro status and how to find every copy on your servers.
Read moreeMudhra CA Compromise: Patching ca-certificates
Eight eMudhra CA keys were compromised. What Ubuntu, Debian, RHEL and Alpine shipped, plus the certifi, Node.js, Go and Java stores to fix too.
Read morePHP2Shell (CVE-2026-109618/109619): Patch Your PHP Fleet
PHP2Shell is fixed in PHP 8.5.12, 8.4.27, 8.3.36 and 8.2.35. What Ubuntu, Debian, RHEL and Alpine shipped, and how to prove every server is patched.
Read moreDebian 11 & OpenSSL 3.0 EOL: Audit Your Fleet
Debian 11 LTS ends 31 August 2026, OpenSSL 3.0 on 7 September. How to audit your fleet for every instance hiding in container images, LXC and appliance VMs.
Read morecPanel CVE-2026-41940: The Authentication Bypass That Was Already in the Wild Before the Patch
A practical breakdown of the cPanel & WHM authentication bypass disclosed on 28 April 2026. How it works, which versions are patched, what to do right now, and how to confirm your hosting fleet is no longer exposed.
Read moreCopy Fail (CVE-2026-31431): What It Is, Why It Matters, and How to Patch Your Linux Fleet
A practical breakdown of the Copy Fail Linux kernel privilege escalation flaw. How it works, which kernels are affected, what the distros are shipping, and how to confirm your servers are actually patched.
Read more